Secure Virtual Environment for Cyber Resiliency Validation

The most direct way to meet the technical objectives for the Secure Virtual Environment (SVE) for Cyber Resiliency Validation would be to replicate the missile defense system’s tactical hardware, software, and network. However, this is cost prohibitive due to the amount of hardware procurement required for the Cyber test environment. Luckily, with the exception of supply chain threats, firmware, and SATCOM jamming/spoofing threats the majority of cyber vulnerabilities that require testing are in the operating systems, software applications, and network configurations as opposed to the physical hardware. As a result, a cyber environment that provides simulated hardware and network devices hosting tactical operating systems, software application, and network configurations is the most cost-effective approach to meet the technical objectives for the SVE for Cyber Resiliency Validation. Gray Analytics shall architect a proof-of-concept architecture for a fully automated SVE incorporating DoD Enterprise DevSecOps Reference Design and the DoD CIO cloud strategy in conjunction with the hardware virtualization work from Oak Ridge National Labs on previous efforts. This Continuous Integration/Continuous Deployment (CI/CD) pipeline architecture is capable of rapidly creating cyber test environments by using virtual emulations of missile defense systems and will include automated cyber resiliency validation regression testing and analysis capabilities. Approved for Public Release | 20-MDA-10398 (2 Mar 20)